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EXECUTIVE SUMMARY 


Space Shuttle Columbia was launched from Kennedy Space Center (KSC) at 
220:08:37:00.012 a.m. Eastern Daylight Time (EDT) on August 8, 1989. The primary 
objective of this Department of Defense (DoD) STS-28 mission was classified. All 
Orbiter payload services and operations in support of the DoD mission payload/cargo 
were provided as planned. After a successful flight of slightly over 5 days, Columbia 
landed at Edwards Air Force Base, CA at 225:09:37:53 a.m. EDT on August 13, 1989. 

Significant anomalies experienced during the STS-28 mission include: 

• Failure of the pilot seat motor/brake assembly resulting in the pilot’s seat 
sliding to the full back position several times during ascent. 

• Observation and subsequent investigation of excessive body flap deflection 
during Max Q. 

• Discovery of a large divot in the External Tank intertank acreage Thermal 
Protection System. 

• Sustained cable short by Kapton insulation. 

• Early boundary layer transition from laminar to turbulent flow caused by 
protruding gap fillers. 

These anomalies will be readdressed in the STS-34 Mission Safety Evaluation. 




FOREWORD 


The Mission Safety Evaluation (MSE) is a National Aeronautics and Space 
Administration (NASA) Headquarters Safety Division, Code QS produced document 
that is prepared for use by the NASA Associate Administrator, Office of Safety, 
Reliability, Maintainability, and Quality Assurance (SRM&QA) and the National Space 
Transportation System (NSTS) Program Manager prior to each NSTS flight. The intent 
of the MSE is to document safety risk factors that represent a change, or potential 
change, to the risk baselined by the Program Requirements Control Board (PRCB) in 
the NSTS Hazard Reports. It also documents unresolved safety risk factors impacting 
the STS-28 flight. 

The MSE is published on a mission-by-mission basis for use in the Flight 
Readiness Review (FRR) and is updated for the Launch Minus 2 Day (L-2) Review. 

For tracking and archival purposes, the MSE is issued in final postflight report format 
after each NSTS flight. 
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SECTION 1 


INTRODUCTION 


1.1 Purpose 

The Mission Safety Evaluation (MSE) provides the Associate Administrator, Office 
of Safety, Reliability, Maintainability, and Quality Assurance (SRM&QA) and the 
National Space Transportation System (NSTS) Program Manager with the NASA 
Headquarters Safety Division position on changes, or potential changes, to the Program 
safety risk baseline approved in the formal Failure Modes and Effects Analysis/Critical 
Items List (FMEA/CIL) and Hazard Analysis process. While some changes to the 
baseline since the previous flight are included to highlight their significance in risk level 
change, the primary purpose is to ensure that changes which were too late to include in 
formal changes through the FMEA/CIL and Hazard Analysis process are documented 
along with the safety position, which includes the acceptance rationale. 

12 Scope 


This report addresses STS-28 safety risk factors that represent a change from 
previous flights, factors from previous flights that have impact on this flight, and factors 
that are unique to this flight. 


Factors listed in the MSE are essentially limited to items that affect or have the 
potential to affect NSTS safety risk factors and have been elevated to Level I for 
discussion or approval. These items are derived from a variety of sources such as issues, 
concerns, problems, and anomalies. It is not the intent to attempt to scour lower level 
files for items dispositioned and closed at those levels and report them here; it is 
assumed that their significance is such that Level I discussion or approval is not 
appropriate for them. Items against which there is clearly no safety impact or potential 
concern will not be reported here, although items that were evaluated at some length 

n0t t0 be a concern wil1 be reported as such. NASA Safety Reporting System 
(NSRS) issues are considered along with the other factors, but may not be specifically 
identified as such. 


Data gathering is a continuous process. However, collating and focusing of MSE 
data for a specific mission begins prior to the mission Launch Site Flow Review (LSFR) 
and continues through the flight and return of the Orbiter to Kennedy Space Center 
(KSC). For archival purposes, the MSE will be updated subsequent to the mission to 
add items identified too late for inclusion in the prelaunch report and to document 
performance of the anomalous systems for possible future use in safety evaluations. 
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13 Organization 

The MSE is presented in seven sections as follows: 

Section 1 - Provides brief introductory remarks, including purpose, scope, 

and organization. 

Section 2 - Provides a description of the STS-28 mission: a brief 

flight/vehicle description, including launch data, crew size, 
flight duration, launch and landing sites, and other mission- 
related information. 

Section 3 - Contains a list of safety risk factors/issues, considered resolved 
or not a safety concern prior to STS-28 launch, that were 
impacted or repeated by anomalies reported for the 
STS-28 flight. 

Section 4 - Contains a list of safety risk factors that were considered 
resolved for STS-28. 

Section 5 - Contains a list of Inflight Anomalies (IFAs) that developed 

during the STS-30 mission. 

Section 6 - Contains a list of IFAs that developed during the STS-28 

mission. Those STS-28 IFAs which are considered to represent 
safety risks will be addressed in the MSE for the next NSTS 
flight. 

Section 7 - Contains background and historical data on the issues, 

problems, concerns, and anomalies addressed in Sections 3 
through 6. This section is not normally provided as part of the 
MSE, but is available upon request. It contains (in notebook 
format) presentation data, white papers, and other 
documentation. These data were used to support the 
resolution rationale or retention of open status for each item 
discussed in the MSE. 

Appendix A - Provides a list of acronyms used in this report. 
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SECTION 2 


STS-28 MISSION SUMMARY 


2.1 Summary Description of STS-28 Mission 

Space Shuttle Columbia was launched from Kennedy Space Center (KSC) at 
220:08:37:00.012 a.m. Eastern Daylight Time (EDT) on August 8, 1989. The primary 
objective of this Department of Defense (DoD) STS-28 mission was classified. All 
Orbiter payload services and operations required to support the DoD mission 
payload/cargo were provided as planned. After a successful flight of slightly over 5 
days, Columbia landed at Edwards Air Force Base at 225:09:37:53 a.m. EDT on August 
13, 1989. 

Ascent performance was nominal. No Space Shuttle Main Engine (SSME) 
anomalies were reported on STS-28. Debris Containment System (DCS) modifications 
implemented prior to STS-28 performed well; this was the first mission since reflight 
with no debris losses. 

The pilot’s seat slid to the full back position several times during 2-g ascent 
periods. The pilot had to drive the seat forward 2 to 3" with the motor several times, 
causing spikes on the Alternating Current (AC) Bus. After the seat was repositioned, it 
immediately began to drift back to the stops. (See Orbiter 1, IFA No. STS-28-02, 
page 6-3.) 

During postflight ascent film review, excessive body flap deflection was believed to 
be observed by the film analysis team. The film was taken from the E207 tracking 
camera, and witnessed at Max Q for about 10 seconds. Measurements derived from the 
film were assessed to show a deflection of up to 9 ±4" (later analysis reduced this 
amplitude) at a natural frequency of 8 Hertz (Hz). Deflection of approximately 2" had 
been witnessed during qualification testing prior to STS-1, with a natural frequency of 
12.4 Hz. (See Orbiter 15, IFA No. STS-28-24, page 6-10.) 

Immediately after External Tank (ET) separation, inflight photographs of the ET 
were taken by the crew. When reviewing these photographs, the debris assessment team 
discovered that a large divot occurred in the ET intertank acreage Thermal Protection 
System (TPS), just above the right-hand bipod ramp. The divot size was estimated to be 
approximately 23" x 15" with a shallow depth of less than 1". Shallow, cohesive TPS 
failures should not provide sufficient mass and velocity to cause impacts on the Orbiter 
TPS with enough energy to result in a safety problem. 
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The teleprinter cable plugged into Main Bus C utility outlet #1 shorted causing a 
1.5-second sustained short circuit with a 51-ampere peak. The 10-ampere circuit breaker 
did not trip, and the short sustained itself by arc tracking of the Kapton wire until the 
wire pair opened at the connector. Investigation revealed that the most likely failure 
cause was long-term fatigue and stress cracking of the Kapton insulation due to repeated 
sharp bending of the wires against the metal backshell tang. The continuing short, 
sustained by the Kapton insulation, illustrates the hazards associated with extensive use 
of Kapton-insulated wire throughout the Orbiter. (See Orbiter 7, IF A No. STS-28-11, 
page 6-6.) 

Unusual low-frequency aileron movement occurred in the Mach 20 to Mach 10 
range during the reentry of STS-28. Unusual Reaction Control System (RCS) and 
aerosurface activity was also observed. The boundary layer transition from laminar to 
turbulent flow began approximately 250 seconds earlier than expected. Transition 
normally occurs 1100 to 1200 seconds following reentry. The Flight Control System 
began to compensate for these external forces by using the aerosurfaces and RCS jets. 

At no time was there a "force fight" between the aileron and RCS jets as originally 
reported. Postflight analysis of surface temperature measurements indicates transition 
from laminar to turbulent flow occurred at Mach 18. Prior to STS-28, the earliest 
transition was at Mach 14 during STS-1 reentry. This earlier-than-normal transition 
caused an extended period of aeroheating at elevated temperatures. All structural 
temperatures experienced were within the 350* F design limit. There is a concern that 
the high heating on STS-28, if coupled with the tile damage experienced on STS-27, 
could result in burnthroughs and vehicle instability. (See Orbiter 18, IFA No. STS-28- 
30, page 6-14.) 

Postflight examination found that the Orbiter TPS sustained a total of 76 hits of 
which 20 had a major dimension of 1" or greater. This total does not include 
approximately 100 to 150 hits on the base heat shield and degradation to the upper- 
surface white tiles that was not the result of debris impact. The distribution of hits on 
the Orbiter TPS does not point to a single source for ascent debris, but indicates a 
shedding of ice and TPS debris from random sources. The majority of the lower-surface 
damage was concentrated aft of the main landing gear doors, with approximately an 
equal amount on each side of the centerline. Based on the severity of damage as 
indicated by surface area and depth, this flight is considered to be better than average. 

Postlanding walkdown of runway 17L was performed starting approximately 15 
minutes after landing. Several pieces of the outboard forward corner tile from the right- 
hand main landing gear door were found near the end of the runway, close to the point 
where the landing gear doors were opened. The missing tile corner was approximately 
6" x 4". Ten pieces of Ames gap filler material were also found in this area. A small 
piece of foil insulation material from the SSME nozzle was found approximately 200 
yards from wheel stop. 
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22 Flight/Vehicle Data 

• Launch Date: August 8, 1989 

• Launch Time: 8:37:00.012 a.m. EDT 

• Launch Site: KSC Pad 39B 

• RTLS: Kennedy Space Center, Runway 33 

• TAL Site: Ben Guerir, Morocco 

• Alternate TAL Site: Moron, Spain 

• Landing Date: August 13, 1989 

• Landing Time: 9:37.53 a.m. EDT 

• Landing Site: Edwards AFB, CA, Runway 17 

• Mission Duration: 5 Days, 1 Hour 

• Crew Size: 5 

• Inclination: 57* (declassified after mission) 

• Altitude: Classified (DoD) 

• Orbiter: OV-102 Columbia 

• SSMEs: 2019, 2022, 2028 

• ET: ET-31 

. SRBs: BI-028 
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2.3 Orbiter Experiments 

The Orbiter Experiments (OEX) utilize the Space Shuttle as a vehicle to collect 
research-quality data in the technology disciplines that will augment the Research and 
Technology data base to support future spacecraft design concepts and enhance the 
operational efficiency of current spacecraft designs. Residual Development Flight 
Instrumentation (DFI) sensors aboard OV-102 are utilized to provide in-place direct 
measurements and recordings of Orbiter environment parameters to allow computation 
of Orbiter flight qualities and coefficients. Experiment hardware is installed and 
integrated with the data systems. The equipment is treated as an integral part of the 
Orbiter. Design is to Orbiter requirements and specifications (NSTS 07700, Vol. X), 
and for autonomous closed-loop operation independent of Orbiter systems or operations 
(except power, Interrange Instrumentation Group B (IRIG-B) time, Multiplexer- 
Demultiplexer (MDM) commands, active cooling). OEX functional failure will not 
affect primary mission success or Orbiter operations. 

The OEX Systems are unique to OV-102 and are not installed on the other 
Orbiter vehicles. This will be the second flight with OEX Systems installed (the first 
flight was on STS-61C). 

The OEX Systems flown on STS-28 are: 


• SEADS 

• SILTS 

• ACIP 

• SSO 


• FFSSO 

• AIP 


- Shuttle Entry Air Data System 

- Shuttle Infrared Leeside Temperature Sensing 

- Aerodynamic Coefficient Identification Package 

- Support System for OEX 

- SCM - System Control Module 

- Tape Recorder 

- PCM - Pulse Code Modulator 

- Forward Fuselage SSO 

- Aerothermal Instrumentation Package. 


OEX Systems to be installed on OV-102 for STS-32 are: 


• OARE 

• TGHE 
. CSE 

• AIPEH 


- Orbital Acceleration Research Equipment 

- Tile Gap Heating Effects 

- Catalytic Surface Effects 

- Aerothermal Instrumentation Package Enhanced. 
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Other OEX Systems are: 


• SUMS - Shuttle Upper Atmospheric Mass Spectrometer (was not flown 

on STS-28 due to lack of SUMS Orbiter Reinforced Carbon- 
Carbon (RCC) Chin Panel). 

• HIRAP - High Resolution Accelerometer Package (was not flown due to 

malfunction, and corrective action did not support STS-28 
launch date). 


2.4 Payload 

Payload Bay: Classified (DoD) 


Middeck: Classified (DoD) 


NASA Headquarters Safety, Reliability, Maintainability, and Quality Assurance did 
not participate in the Safety Reviews for the DoD payloads. NASA Headquarters Safety 
Division, Code QS, did participate in review of the Integrated Cargo Hazard Report 
(ICHR) by the System Safety Review Panel (SSRP). 
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SECTION 3 


SAFETY RISK FACTORS/ISSUES IMPACTED BY STS-28 ANOMALIES 


This section contains a list of the safety risk factors/issues, considered resolved or 
not a safety concern for STS-28 prior to launch (see Sections 4, 5, and 6), that were 
impacted or repeated by anomalies reported for the STS-28 flight. The list indicates the 
section of this Mission Safety Evaluation (MSE) Report in which the item is addressed, 
the item designation (Element /Number) within that section, a description of the item, 
and brief comments concerning the anomalous condition that was reported. 
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ITEM 


COMMENT 


Section 4: Resolved Safety Risk Factors 

Orbiter 1 Gaseous Oxygen (GOX) 

Flow Control Valve (FCV) 
sluggish operation or 
lockup due to 
contamination. 


Orbiter 15 Environmental Control and 
Life Support System 
(ECLSS) freon coolant loop 
flow rates are degrading on 
OV-102. 


There were no instances of sluggish 
GOX FCV operation reported on 
STS-28. However, the first instance of a 
sluggish Gaseous Hydrogen (GH 2 ) FCV 
was experienced. Space Shuttle Main 
Engine (SSME) GH 2 FCV #1 indicated 
sluggish response during the first three 
minutes of ascent. Indications were that 
the FCV would not fully stroke and 
would not respond when commanded 
during thrust bucket. GH 2 FCVs #2 and 
#3 operated normally during the entire 
ascent. Postflight leak checks found that 
FCV #1 was stuck in the open position. 
All three GH 2 FCVs were removed and 
sent to the vendor for inspection. 
Tolerances were found to be tighter than 
specification: 0.007" versus 0.009" to 
0.013" specification tolerance. GH 2 FCV 
operation will be readdressed in the 
STS-34 MSE. 


As expected, the OV-102 freon loops 
flow continued to degrade during the 
mission. Freon loop #1 degraded 
approximately 50 pounds per hour 
(lb/hr) when the freon loop radiator 
panel outside temperature dropped 
below -60° F. Loop #2 degraded 
approximately 100 Ib/hr during the same 
time period. The degradation in both 
loops has been attributed to possible 
water contamination in the freon. In 
both cases, the freon flow rate did not 
degrade below the Flight Rule minimum 
limit. Plans are to replace the pump 
package on loop #2 prior to the next 
OV-102 flight, STS-32. 
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ITEM 


COMMENT 


Section 5: STS-30 Inflight Anomalies 

Orbiter 4 Fuel Cell (FC) #2 On STS-28, FC #1 H, flow meter began 

Hydrogen (H 2 ) flow meter to drift high at Mission Elapsed Time 
failed. 12:30 and later exhibited erratic 

behavior with intermittent upper limit 
indications. Plans are to fly as is until 
there is a requirement to remove 
FC #1, since access to the flow meter 
requires FC removal. 
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SECTION 4 


RESOLVED STS-28 SAFETY RISK FACTORS 


This section contains a list of the safety risk factors that were considered resolved 
for STS-28. These items have been reviewed by the NASA safety community. A 
description and information regarding problem resolution is provided for each safety risk 
factor. The safety position with respect to resolution is based on findings resulting from 
System Safety Review Panel (SSRP) and Program Requirements Control Board (PRCB) 
reviews or other special investigation findings. It represents the safety assessment 
arrived at in accordance with actions taken, efforts conducted, and tests/retests and 
inspections performed to resolve each specific problem. 
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SECTION 4 INDEX 


INTEGRATION 

1 Ground Umbilical Carrier Plate pyrobolt Factor of Safety. 

2 Instrument and Electronic Assembly anomaly. 

3 Liquid Oxygen umbilical mate anomaly. 


ORBITER 

1 Gaseous Oxygen Flow Control Valve sluggish operation or lockup due to 
contamination. (IFA on STS-26, -27, and -29) 

2 Right-hand brake line vibration at 55 Hertz. 

3 Debris can prevent External Tank doors from closing. 

4 Helium Regulator contamination. 

5 Orbital Maneuvering System engine oxidizer inlet line. 

6 OV-102 has two Multiplexer-Demultiplexers which may contain Erie 
ceramic capacitors that are prone to failure. 

7 Data Processing System Data Bus timing. 

8 Engine #3 Main Propulsion System Liquid Hydrogen Recirculation Pump 
damage. 

9 Liquid Hydrogen Recirculation Pump failure. (STS-30 Preflight Anomaly) 

10 Bolt failure in the Auxiliary Power Unit Gas Turbine module. 

11 Liquid Oxygen Prevalve closure software implementation. 

12 Shuttle Infrared Leeside Temperature Sensing Pod mass increase at tip of 
tail. 

13 Improved Auxiliary Power Unit failure at Sundstrand. 

14 Umbilical Retract Actuator may fail in extended mode. 

15 Environmental Control and Life Support System freon coolant loop flow 
rates are degrading on OV-102. 

16 Potential Auxiliary Power Unit exhaust duct leak. 

17 Auxiliary Power Unit Fuel Isolation Valve anomaly. 


SSME 

1 Engine 0212 High-Pressure Oxygen Turbopump failure during testing. 

2 High-Pressure Fuel Turbopump leak. 

3 High-Pressure Oxidizer Turbopump balance piston cavity pressure port 
standoffs weld defects. 

4 Low-pressure fuel duct flex joint failure. 

5 Main Combustion Chamber/Nozzle G-15 seal crack/discoloration. 

6 A High Pressure Fuel Turbopump bearing cage taken from stock for 
assembly was found to be cracked. 

7 Improperly-sized Lee Jets could be installed in flight engines. 
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SECTION 4 INDEX - (Cont.) 


SSME 


8 Engine 0209 Heat Exchanger leak. 

9 Damper pocket cracks on the High-Pressure Fuel Turbopump first stage 
turbine blades. 

10 Engine 2011 nozzle tube bulge. 


SRM 

1 Failure of the left secondary joint heater to pass the Dielectric 
Withstanding Voltage test. 

2 Soft Stat-O-Seal retainers. 

3 Cold-temperature exposure. 

4 PV-1 Nozzle strain aberration. 

5 Barrier Booster housing bore sealing surface scratches. 

6 Uncured Room Temperature Vulcanizate in STS-30 Nozzle Joint #3 

7 Gouges and pits in Aft Stiffener boltholes. 

8 Stiffener Stub ligament cracks. 

9 Safe and Arm (Device) failure to cycle during bench check at Kennedy 
Space Center. 

10 Redesigned Solid Rocket Motor igniter inner Gask-O-Seal leakage. 
SRB 

1 Solid Rocket Booster K5NA application in the presence of water. 


External Tank monoball rotation. 

Liquid Hydrogen level sensor circuits read low resistance values. 
Prolongation data from two lots of vertical strut forgings did not meet 
stress corrosion cracking acceptance requirements. 

Liquid Oxygen aft feedline elbow residue. 

Teflon material found in Gaseous Oxygen Quick Disconnect. 


GFE 


Dale Resistors in Pyro Initiator Controllers. 
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Turning of the three jacking bolts to full-mate position, after the plate 
moved freely, was very smooth, experienced very little running torque, 
provided no misalignment indication or pinched hardware. 


RESOLVED STS-28 SAFETY RISK FACTORS 


ui 

o 


5 

O < 

< z 
*2 

cc < 


CO 

I- 


LU 

2 

2 

O 

O 


e 

u 

S 

§> w 

•■a i l 

si 

> 

2 -c 

J3 w 
1/3 -O 

£ a 

£ W 
c u 


o 

SO 

c <3 
O 


"O 

0 

1 

J= 

£0 


o 

w 

•a 

o 

a 

H 

UJ 


ts £ 

w X 

w r- 

u t— t 

.2 c 

8.1 

uO 

S </3 

<U 

o a 

to flj 

<D U 
u- u 

O ^ 

CQ *-3 


oo 

I 


cc 

sg 



Ui z 


2 . 

ui O 

_l Ui 
Ui (/) 


Z| 



CO 

tr 

O 

— h 

O 
< 
U. 

* 

CO 

tr 

In 

UL 

< 

</) 

00 

CM 

I 

CO 

h 

CO 

Q 

LU 

> 

_l 

O 

CO 

LU 

CC 


tu 

O 

z 

5 

Q. 

Hi 

O 

o 

< 

* 

0) 

E 

■ — 

e 

z 

LU 

2 

2 

O 

o 


LU 

_J 

< 

z 

o 

P 

< 

CC 


DC 

*P 

</> 1“ 


.2 *8 
8 £9 

i— <L> 

ita 

d w g ° 

2 

o « to S 

S'? 

-O S^C'J 

°®ei 

i u , 

’•s 


— o 
■8 u 1 - 

U s 

M o * 

w CT| M i/3 
w w ^ u 
u a 
C JS >> u 
O C-> co u 
^.S » O 

g 

h q o 


o > 

*! 


9 s! ^ ! 

" > 9 i 

sf ■ 2/ | 2 s 
"s| « 8 

i h go — ^ a 

£2 ^ {2 =g -§ o 


C/D 


Si" 


<D 


^ — T3 O r 2 * *< 

■§ ^ S J -s |2 g*-| i 
•S Hi 2 

M (O 

^ S o 5 

:s ^ ° 6 

-T3 <N o O- 

3^3 S 6 

< u ^ „ 

flj _ 

jS S 8 . 

■§>-•£ -2 
C « > W> 

S ? |1 

2 ]j> w c 

fe ijs « 
*8 el 

W 3 8 


O 
C 

0 5 J- o *o 
O J3 ry G 

■O^ - ^ 3 
e y S3 O 5 
££ < 

3« S3 
^2-g a * 

«i.SP--a a 

I'S § S| 

1 ^ i -g .| 

Q 60 > > C 


a> 

VM -P 

O w 

c3 

of 

•2 -p 
-c jj 

JS J 

— -3 
•rf.9 

JJ 

•8S 

-■a 

.as 

fa 

2^ 
8,w 
a * 

<U M 

ii 
00 




1 «• Mr 

.5 o o ^ 

> > «« "3 

UcU.Sg 
tu *5 tu 3 " 

X 5 X s b 

§§8ii 



I«s*g 

bfi i iz 


t 3 « 5^ a 
a =r H a. 
<3 3 c/D cd 


O 

Z 
. "d 

*T3 4> 

JJ ts 

8.-S 
J 9 

O "O 

IX O 

ss 
' a 

M u 

y «tj 
tu u 

X <u 
O 5 

a =t 

00 <o 

S *> 

S"i 
®» « 
•o -c 

"2 1 
li 
8 I 

<o O 

cu.S 

2 e 

5U jQ 


H 8 


w m u i 

NS J 
33 — T3 H — 

o S « 

>0 « O . J3 

•2-S § 8 » 

f-S’S s 2 



8 5> 

C »-j 5 ^-i ^ 

•8 -8 1*8^ 
g.li'S 8 
3 8.-as« 

S o > 5 
q ^ > -o bp 

^ -o O S .S 
c P ^ -3 

2 3 §ifs 

O “ O m On 
^ « h 15 2 j 
5 G § ,fe O 

i .2 3 *- < 
X 5 o-ti 
a: 


S 


CL) ^ 

JS 


3 l= 


£2 


D 


o -o 




1 1 5 ;S 

g Q- uo ‘-5 

2 <U JG g 

S-ign 8 

50 >r . h 
G re 

*u J3 .5 *3 

3 .tS g 

Q 5sS*i 


8 


a T? 

O P 


(N 

o 


I 

co ■> 
3 ^ 

^ o 


O 
C 

- o 

Q--0 


<U 


o 

<N 


O. 

3 

2 J 

C w 

o o 
O a 
» .2 
o <3 

fr l. 

P.8. 

X o 
O J3 

s-i-s 

i-s I Jf 

tlfg 

3 w g 
O 0 w 

lliiS 

a>-oc 


C r^T 



C 

o 


u 

x> 


•? 


a> 

C 




•a= 


to 

0C >o 



cq m 
0£ 06 
o o 


2 

as 

33 



LU Z 

IU O 
-J LU 
LU <0 


<N 


A/b further brake line vibration or noise 

problems were reported on STS-28 Testing and analysis by RI/Downey has indicated that the vibration is an acceptable 

condition providing that the pressure fluctuations do not exceed 75 psi. Addition of 
12 clamps reduced the fluctuations to 36-48 psi. 
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Debris must change direction 90* and travel ~ T to get trapped between 
ET door and seal. 
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resulted irom rreon suspected ot being present during tube brazing. Investigation 
into the build process indicated that the fitting at the regulator inlet had been 
debrazed and replaced. (Chlorine disassociates from Freon or Tygon tubing when 
heated. If moisture is present. Hydrogen Chloride (HC1) is formed.) 
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were reported relating to to this direction because they have not failed. 
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This risk factor was resolved for STS-28 
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zero-g shutdown caused by fluid cavitation in the HPOTP. (The maximum 
allowable pump speed is approximately 38,000 revolutions per minute 
(rpm).) 
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rubi oia-zo investigation lound an error in preflight analysis of software timing. I 
has been determined that the L0 2 prevalve closes 0.16 second earlier than thought 
prior to STS-28. The result of this determination is that a 0.10-second window for 
SSME pump overspeeding does not exist. 

This risk factor was resolved for STS- 28 . 
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extend solenoid valve/manifold configuration precludes this specific problem, but 
seepage past the O-ring could result in uncommanded extend of an actuator any 
time the APUs are running. A detailed geometric analysis found that if the #3 L0 2 
umbilical actuator inadvertently extended, guide pin #1 would interfere with ET 
umbilical door closure. 
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would leave the actuators in free float. At APU startup for reentry, the actuator 
would extend and place a point load on the ET door. 
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mfc factor was acceptable for STS-2& 
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APU #2 FIV B indicated "open H after commanded closed following the APU 
confidence run. The APU-side pressure and fuel tank pressure remained equal, 
indicating that the valve was stuck open. Tank pressure was increased to flight 
level, and downstream pressure remained the same, indicating that the increased 
tank pressure closed the isolation valve. No increase in pressure on the APU side 
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Engine 2019 has a large effective protrusion/gap margin. The MCC lip is 
not machined; the nozzle seal lip is also not machined. This engine is 
acceptable for 13,000 additional seconds. 
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based on lowest time of 4000 seconds for a through crack. The OV-102 
units will not exceed 2000 seconds after a normal flight. 

In the event of an aborted flight, the 2000-second limit would be exceeded 
by less than 6%; there is still almost a factor of 2 margin relative to the 
lowest time of 4000 seconds for a through crack. 
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- GCV Fail-Safe Orifice 

- HPV Check Valve. 



•C o >> 

g gp a 

^ b a. 

«/l 3 j-j 

g C/3 

? .S eso 

.Bf £ 
r Q e 

« B.l 

^ O 3 
(U c O 

3 8 = 

u £ u 

y o 3 
g-CJQ 

cL13 13 
H I I 



3 « s 

1 « x 

■s J « 

“8u"‘a 

S g U13 c 
J3 t 1 ) u 

H *g "3 o 

*o fl o w 

§ J *8 2 | 

8 ^ 41 .2 <8 

« a J§ & « 

•|8-a|J 

5 >2 .22 <J " *- 

si§-s§ | 

O.JJ > o5 S 

5 o'5 „ M 

Ur (Tfl a 

> *5 U<n O 

O 60 “ 

T3 G y O O 
- £ O J3 

S -c H 

0 S -* -o 

TJ 2 ^ £ 

a « 

o QlZ rt * 

|£l|1 

C 4 > — , 

*2 -* a> *J3 «J 

^i3g 

■8.s|^ 6 

J£ 0 2 -T u 
1.1’Sh U 

02 2 

JBas: 

1 s° «t 

a S .a> g .§* d 

a-o a* 2 3. 2 

t) — Q o 3 « 

clc.s a o 


u y U 
<U 3 D 

00 E 00 

s 2 § 
,131 

w &w 


<USui 
rr» r*-> rri 
CO CQ CO CO 

U til Ul tu 

2222 


00 


This risk factor is resolved for STS-2&. 
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77iiy m/c factor was acceptable for STS -28. 
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the counterbored holes around the retainer. Furthermore, yielding of a retainer 
would be detected during Stat-O-Seal leak check (bubble test). 
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actual discontinuities will be diminished by insulation processing (vulcanization), 
thereby improving the FOS. Worst-case separations would not significantly reduce 
the thermal FOS. Worst-case failure is multiple-ply separation and complete loss of 
CFF/EPDM, 1.1 minimum FOS (thermal and erosion of NBR). (Methodology for 
calculating FOS is still under evaluation.) Previous postflight inspections 
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was 2.33 (1.5 required). Separation at staged/unstaged CFF/EPDM was not a 
concern; separation, if present, would close and be in compression. No additional 
risk was imposed on 360H005 hardware due to cold-temperature exposure than has 
flown on previous motor sets. 
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measurements were taken to ensure clearance at the chamfer, and there was 0.025' 
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77iw risk factor was resolved for STS-28. 
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stresses are all compressive on the inboard surface of cracked outer ligament holes. 
There have been eleven successful flights with outer ligament cracks. 

This risk factor was acceptable for STS-2& 
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The rationale for flight was that failure of the inner joint gasket on both tests was 
caused by anomalous, nonflight test configurations. 
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procedures allow moderate misting of gloves worn during application, prohibit 
direct spraying of water on K5NA, and require the control of the thickness/rate of 
application to 1” per 1-1/2 hr. These procedures have been implemented at USBI, 
and modified procedures have been provided to the Shuttle Processing Contractor 
(SPC) for implementation. 
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or KLKU5 resistors in the ET/SRB/SRM/SSME. 

Failure of the resistors would cause inability to fire. However, redundant PICs a 
included for each nominal planned Criticality 1 function. A Dale resistor failure 
would not result in inadvertent firing of PICs. 

This risk factor was resolved for STS-28. 



SECTION 5 


STS-30 INFLIGHT ANOMALIES 


This section contains a list of inflight anomalies arising from the STS-30 mission. 
Each anomaly is briefly described, and risk acceptance information and rationale are 
provided. 
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SECTION 5 INDEX 


ORBITER 

1 Cabin pressure transducer failed. 

2 The #2 Gaseous Hydrogen pressure system temperature indicator failed. 

3 Center engine Liquid Hydrogen inlet pressure transducer failed. 

4 Fuel Cell #2 Hydrogen flow meter failed. 

5 Left engine Liquid Hydrogen inlet pressure transducer biased low. 

6 Reaction Control System Jet R1U failed off, post External Tank 
separation. 

7 Auxiliary Power Unit #2 Gas Generator fuel pump "A" heaters 
inoperative. 

8 Right Orbital Maneuvering System fuel total quantity gage failed. 

9 Right Reaction Control System A-leg oxidizer helium isolation valve failed 
open. 

10 Water Spray Boiler #2 Gaseous Nitrogen pressure decay. 

11 General Purpose Computer #4 failed to sync. 

12 Engine Helium fill Check Valve failures. 

13 The right Orbital Maneuvering System Gaseous Nitrogen pressure 
regulator regulated low. 

14 Main landing gear fluid leak. 

15 Nose wheel steering enable late. 

16 Ding on forward window #6. 

17 The Altitude/ Vertical Velocity Indicator reading was high during Flight 
Control System checkout. 

18 Bulkhead blanket damage. 


SRM 

1 Factory joint weather seal aft edge unbonding. 

2 Solid Rocket Motor nozzle snubber ring displacement. 

3 Cut in the secondary seal of the outer gasket. 


SRB 

1 Left-Hand Solid Rocket Booster main parachute failure. 

2 Debris lost from multiple Debris Containment Systems. 

3 Left-Hand Solid Rocket Booster External Tank Attachment cover sheared 

fasteners. 

4 Left-Hand Solid Rocket Booster External Tank attachment ring cap and 
web separation. 
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SECTION 5 INDEX - (Cont.) 


El 

1 Leak in 4" Liquid Hydrogen recirculation line. 
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No anomaly reported on STS-2& 
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This risk factor was acceptable for STS-2K. 
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SECTION 6 


STS-28 INFLIGHT ANOMALIES 


This section contains a list of inflight anomalies arising from the STS-28 mission. 
Each anomaly is briefly described, and risk acceptance information and rationale are 
provided. 
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SECTION 6 INDEX 



1 Pilot seat moved during ascent. 

2 Vernier thruster F5R annunciated fail leak. 

3 Nose Landing Gear Weight On Wheels indication failed off. 

4 Fuel Cell #1 Hydrogen flow erratic. 

5 Abort light failure. 

6 Forward Reaction Control System F5L heater failed on. 

7 Main Bus C utility outlet #1 teleprinter short circuit. (Teleprinter cable 
anomaly) 

8 Auxiliary Power Unit isolation valve talkback failure. 

9 Environmental Control and Life Support System freon coolant loop low 
flow rate. 

10 Right-hand Orbiter Maneuvering System fuel quantity gage reading high. 

11 Auxiliary Power Unit #1 test line temperature read high. 

12 STS-28 crew experienced eye irritation. 

13 Hydraulic System #2 unloader valve operated out of specification. 

14 Excessive body flap deflection during ascent. 

15 Orbiter structural heat damage. 

16 Crew reported a loud thump/thud at first OPS-1 transition. 

17 Gaseous Hydrogen Flow Control Valve #1 showed sluggish response. 

18 Early assymetrical boundary layer encounter resulted in anomalous 
aerosurface movement, usage of more than a normal amount of RCS 
propellant, and excessive Thermal Protection System damage. 

19 Umbilical foam detached from the External Tank Liquid Oxygen 17" 
disconnect. 


SRB 

1 Loose bolts on the left Solid Rocket Booster External Tank Attachment 

Ring. 

SRM 

1 Gask-O-Seal void found during postflight inspection. 

KSC 

1 Mobile Launch Platform recorders were accidently turned off. 
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MSolL, the seat was removed from OV-102 and shipped to Wright Patterson Air 
Force Base (AFB) for vibration testing. It underwent vibration equivalent to 
greater than 900 flights. The seat was reinstalled in OV-102 by RHFA and passed 
the Acceptance Test Procedure (ATP) (1-g). 
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Alter troubleshooting, the problem was isolated to Channel 31 of Annunciator 
(IFA No. STS-28-06) Control Assembly (ACA) #2, where a bad bulb assembly was found. The socket 

and bulb were removed and replaced. 
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The FCL #2 pump package and filter were removed and replaced. Samples were 
taken of FCL #1 and #2; mositure content was within specification. Flow rate 
transducers were removed and replaced, and "brazed-in" filter replacement was 
completed. Flow rales were within specification. 
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of 12.4 Hz. Also during acoustical testing, similar deflections to those recorded on 
STS-28 were seen in the rotary actuator attachment area; however, investigation 
found that a bearing in the rotary actuator was walling out. 
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Calculate estimates of potential visual amplification and distortion 
associated with views through Space Shuttle Main Engine (SSME) plume 
gases. Estimate bounds of measurement accuracy including the end-to-end 
photo/video system performance capabilities. 
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It was reported during the STS-34 Safety, Reliability, Maintainability and Quality 
Assurance (SRM&QA) Prelaunch Assessment Review (PAR) on October 10, 1989, 
that no significant body flap tile damage has occurred on any flight which could be 
attributed to excessive body flap deflections. 
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first OPS-1 transition. of the first OPS-1 transition at T-20 minutes. The crew stated that the whole 

vehicle shook. At the time of the OPS-1 transition, the aerosurfaces are 
(IFA No. STS-28-27) commanded to the null position from droop (move approximately 8°). Hydraulics 

are operating on circulation pumps (500 psi). Vehicle systems are quiescent at this 
time period. 
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ORBI-249A during early transition on STS-1. During this same interval, two RCS jets also fired 

in phase with the aileron for a coordinated response; the RCS limit is 4 jets for this 
operation. At no time was there a "force fight" between the aileron and the RCS 
jets as previously reported. 
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SECTION 7 


BACKGROUND INFORMATION 


This section contains pertinent background information on the safety risk factors 
and anomalies addressed in Sections 3 through 6. It is intended as a supplement to 
provide more detailed data if required. 
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APPENDIX A 


AC 

ACA 

ACIP 

AEDC 

AFB 

AIP 

AIPEH 

a.m. 

APU 

ARS 

ATP 

AVVI 

BFS 

BTU 

CA 

CRES 

CSE 

CV 

CVAS 

DAR 

DC 

DCS 

DEU 

DFI 

DoD 

DOL 

DPS 

DR 

DWV 


LIST OF ACRONYMS 

Alternating Current 
Annunciator Control Assembly 
Aerodynamic Coefficient Identification Package 
Arnold Engineering Development Center 
Air Force Base 

Aerothermal Instrumentation Package 
Aerothermal Instrumentation Package Enhanced 
Before Noon (Ante Meridiem) 

Auxiliary Power Unit 
Air Revitalization System 
Acceptance Test Program 
Altitude/ Vertical Velocity Indicator 

Back-Up Flight System; Backup Flight Software 
Bus Terminal Unit 

California 

Corrosion Resistant Steel 
Catalytic Surface Effects 
Check Valve 

Configuration Verification Accounting System 

Deviation Approval Request 

Direct Current 

Debris Containment System 

Display Electronics Unit 

Development Flight Instrumentation 

Department of Defense 

Day of Launch 

Data Processing System 

Discrepancy Report 

Dielectric Withstanding Voltage 


A-l 


ECC 

ECLSS 

EDT 

EIU 

ET 

ET/SEP 

ETA 

F 

FC 

FCL 

FCS 

FCV 

FDA 

FeCl 

FFSSO 

FIV 

FMEA/CIL 

FOS 

fps 

FRI 

FRR 

ft 


g 

GCV 

GFE 

GFI 

GG 

GH 2 

gn 2 

go 2 

GOX 

GPC 

GSE 

GUCP 


appendix a 

LIST OF ACRONYMS (CONT.) 

Eaton Consolidated Controls Corporation 

Environmental Controls and Life Support System 

Eastern Daylight Time 

Engine Interface Unit 

External Tank 

External Tank/Separation 

External Tank Attachment 

Fahrenheit 

Fuel Cell 

Freon Coolant Loop 

Flight Control System 

Flow Control Valve 

Fault Detection and Annunciator 

Iron Chloride _ , . _ 

Forward Fuselage Support System for Orbiter Experiments 

Fuel Isolation Valve . . , _ T • 

Failure Modes and Effects Analysis/Critical Items List 

Factor of Safety 

Feet Per Second 

Flow Recirculation Inhibitor 

Flight Readiness Review 

Feet 

Gravitational Acceleration 
Gaseous Oxygen Control Valve 
Government Furnished Equipment 
Ground Fault Interrupt 
Gas Generator 
Gaseous Hydrogen 
Gaseous Nitrogen 
Gaseous Oxygen 
Gaseous Oxygen 
General Purpose Computer 
Ground Support Equipment 
Ground Umbilical Carrier Plate 
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LIST OF ACRONYMS (CONT.) 


H 2 

Hydrogen 

HC1 

Hydrogen Chloride 

HDP 

Holddown Post 

HGDS 

Hazardous Gas Detection System 

HIRAP 

High Resolution Accelerometer Package 

HMF 

Hypergol Maintenance Facility 

HPFTP 

High Pressure Fuel Turbopump 

HPOTP 

High-Pressure Oxidizer Turbopump 

HPV 

High Pressure Valve 

HR 

Hazard Report 

hr 

Hour 

Hz 

Hertz 

I/O 

Input/Output 

IAPU 

Improved Auxiliary Power Unit 

ICHR 

Integrated Cargo Hazard Report 

ID 

Inside Diameter 

IEA 

Instrument and Electronic Assembly, Integrated Electronic Assembly 

IFA 

Inflight Anomaly 

in-lb 

Inch-Pound 

INTG 

Integration 

IRIG-B 

Interrange Instrumentation Group B 

JSC 

Johnson Space Center 

KSC 

Kennedy Space Center 

L-2 

Launch Minus 2 Days (Review) 

lb 

Pounds 

lb/hr 

Pounds Per Hour 

LCC 

Launch Commit Criteria 

LH 

Left-Hand 

lh 2 

Liquid Hydrogen 

LiOH 

Lithium Hydroxide 

lo 2 

Liquid Oxygen 

LOX 

Liquid Oxygen 

LP 

Launch Pad 

LSFR 

Launch Site Flow Review 
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LIST OF ACRONYMS (CONT.) 

MADS 
MCC 
MDM 
ME 
MEC 
MECO 
MET 
mg/ft 2 
MLP 
MMC 
MPS 
MPSS 
MPU 
MS 
MSE 
MSFC 

NASA National Aeronautics and Space Administration 

NBR Nitrite Butadiene Rubber 

NLG Nose Landing Gear 

NPSP Net Positive Static Pressure 

NSI NASA Standard Initiator 

NSRS NASA Safety Reporting System 

NSTS National Space Transportation System 

0 2 Oxygen 

OARE Orbiter Acceleration Research Equipment 

OD Outside Diameter 

OEX Orbiter Experiments 

OMI Operations and Maintenance Instruction 

OMRSD Operational Maintenance Requirements and Specifications Document 

OMS Orbital Maneuvering System 

OPB Oxidizer Preburner 

OPO Orbiter Project Office 

ORBI Orbiter 

OV Orbiter Vehicle 


Modular Auxiliary Data Systems 
Main Combustion Chamber 
Multiplexer-Demultiplexer 
Main Engine 
Maine Engine Controller 
Main Engine Cutoff 
Mission Elapsed Time 
Milligram Per Square Foot 
Mobile Launch Platform 
Martin Marietta Corporation 
Main Propulsion System 
Main Parachute Support Structure 
Magnetic Pickup Unit 
Margin of Safety 
Mission Safety Evaluation 
Marshall Space Flight Center 
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PAR 

PC 

PCASS 

PCM 

PFS 

PIC 

PMBT 

ppm 

PRACA 

PRCB 

psi 

psia 

psig 

PTI 

Q 

QD 

RCC 

RCN 

RCS 

RH 

RI 

RM 

rpm 

RSRM 

RTLS 

RTV 


LIST OF ACRONYMS (CONT.) 

Prelaunch Assessment Review 
Chamber Pressure 

Program Compliance Assurance and Status System 

Pulse Code Modulator 

Primary Flight Software 

Pyro Initiator Controller 

Propellant Mean Bulk Temperature 

Parts Per Million 

Problem Reporting and Corrective Action 
Program Requirements Control Board 
Pounds Per Square Inch 
Pounds Per Square Inch Absolute 
Pounds Per Square Inch Gage 
Program Test Inputs 

Dynamic Pressure 
Quick Disconnect 

Reinforced Carbon-Carbon 
Requirements Change Notice 
Reaction Control System 
Right-Hand 
Rockwell International 
Redundancy Management 
Revolutions Per Minute 
Redesigned Solid Rocket Motor 
Return to Launch Site 
Room-Temperature Vulcanizate 
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LIST OF ACRONYMS (CONT.) 


S/N 

Serial Number 

S&A 

Safe & Arm (Device) 

sees 

Standard Cubic Centimeters per Second 

scim 

Standard Cubic Inches Per Minutes 

SCM 

System Control Module 

SEADS 

Shuttle Entry Air Data System 

SEM 

Scanning Electron Microscope 

SEP 

Separation 

SILTS 

Shuttle Infrared Leeside Temperature Sensing 

SIT 

System Integration Test 

SLA 

Super Light Ablator 

SMIA 

Serial Multiplexer Interface Adapter 

SPC 

Shuttle Processing Contractor 

SRB 

Solid Rocket Booster 

SRM 

Solid Rocket Motor 

SRM&QA 

Safety, Reliability, Maintainability and Quality Assurance 

SSC 

Stennis Space Center 

SSME 

Space Shuttle Main Engine 

SSO 

Support System for Orbiter Experiments 

SSRP 

System Safety Review Panel 

STS 

Space Transportation System 

SUMS 

Shuttle Upper Atmospheric Mass Spectrometer 

TAL 

Transatlantic Abort Landing 

TGHE 

Tile Gap Heating Effects 

TPS 

Thermal Protection System 

TVC 

Thrust Vector Controlf 

USBI 

United Space Boosters, Inc. 

VAB 

Vehicle Assembly Building 

VDC 

Volts Direct Current 

VREL 

Relative Velocity 

WONG 

Weight-On-Nose-Gear 

WOW 

Weight on Wheels 

WSB 

Water Spray Boiler 
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